AVP - Technology Risk - BFSI

Responsibilities:

- Evaluate the adequacy and effectiveness of applicable policies, procedures, processes, systems and internal controls.

- Perform gap analysis on policy requirements for risk types aligned to various operational and Technology processes.

- Provide monitoring and independent oversight of the execution of technology, and info security as they relate to policy and standards, including the independent oversight of the build out of a new front-line process dedicated to the end-to-end risk management lifecycle.

- Develop, implement, and support an effective control review and challenge process to provide transparency, accountability and escalation of control effectiveness.

- Consult with frontline partners and other independent risk management teams to open issues related to control failures.

- Validate/evaluate appropriateness, completeness, effectiveness and sustainability of corrective actions taken to address situations defined as issues.

- Perform activities required under the Operational Risk Program Policy and related policies and procedures.

- Review and challenge adequacy and efficiency of the front-line controls

- Create reports and memos communicating oversight results.

- Support responses to internal testing, audits or regulatory examinations as needed.

- Conduct independent risk management reviews and identify control expectations with primary focus on technology processes/applications.

- Experience developing risk metrics and trending reports.

- Ability to synthesize data from a variety of sources and deliver results quickly.

Essential Qualifications:

- 10+ years of experience in risk assessment, independent risk management, control evaluation, risk reporting and issue management on various information and cyber security risks, of which 5+ years must include direct experience in risk management demonstrated through work.

- Industry recognized certification such as CISM / CISA / CRISC / CISSP.

- Good to have working knowledge of COBIT framework with an emphasis on measuring control effectiveness and risk assessments.

Desired Qualifications:

- Working knowledge of local and US banking guidelines related to Information Security oversight and outsourcing in financial services (OCC, FRB, RBI, BSP) and able to apply that knowledge to sound risk management practices.

- Advanced Microsoft Office skills.

- Ability to challenge for material areas of improvement and articulate risk impact.

- Excellent verbal, written and interpersonal communication skills.

- Strong analytical skills with high attention to detail and accuracy.

- Ability to interact with all levels of an organization and present complex material in a digestible, consumable manner to all levels of management.

Other desirable skills experience:

- Broad knowledge of operational risks including technology, information cyber security and the issues faced by financial institutions today.

- Strong knowledge on enterprise risks, i.e., front office and middle office processes/controls would be considered as an added advantage.

- Experience in developing risk metrics and trending reports.

- Strong organization and detail-oriented skills, with proven ability to manage and prioritize work to meet deadlines despite frequent interruptions.

- Highly proactive, able to work both independently and within a collaborative team-oriented environment using sound judgment in decision-making.

- Demonstrated ability to work effectively with virtual and/or geographically dispersed teams.